141 matches found
CVE-2026-99266
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2026-99266
In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix buffer offsets in areas above 4GB iozcrxqueuecqe computes the offset of the buffer in its area from netiovidx, which is an unsigned int, so the shift is done in 32 bits and only the result is widened to the u64...
EUVD-2026-115791
In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix buffer offsets in areas above 4GB iozcrxqueuecqe computes the offset of the buffer in its area from netiovidx, which is an unsigned int, so the shift is done in 32 bits and only the result is widened to the u64...
CVE-2026-99266
The Linux kernel is affected by a vulnerability in the io_uring/zcrx component. The root cause is that io_zcrx_queue_cqe() computes buffer offsets using net_iov_idx(), which is an unsigned int . This causes shifts to occur in 32 bits before being widened to u64 . In areas larger than 4GB (up to 1...
PT-2026-136102
In the Linux kernel, the following vulnerability has been resolved: io uring/zcrx: fix buffer offsets in areas above 4GB io zcrx queue cqe computes the offset of the buffer in its area from net iov idx, which is an unsigned int, so the shift is done in 32 bits and only the result is widened to th...
CVE-2026-27280
Out-of-bounds write in dngrendertask::ProcessArea Adobe DNG SDK / Android Reached from an ordinary DNG file through Android's public image-decoding API , and reproduced on a Galaxy S25 using the phone's own/system/lib64/libdngsdk.so. Vulnerable: DNG SDK 1.7.1 build 2410 / 2471 2410 is what the...
Important: Red Hat Security Advisory: compat-openssl11 security update
An update for compat-openssl11 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Important: Red Hat Security Advisory: compat-openssl11 security update
An update for compat-openssl11 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...
RHEL 9 : compat-openssl11 (RHSA-2026:89736)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:89736 advisory. The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the librarie...
RHEL 9 : compat-openssl11 (RHSA-2026:89737)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:89737 advisory. The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the librarie...
MiracleLinux 9 : openssl-3.5.8-2.el9_8.ML.1 (AXSA:2026-2062:18)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2062:18 advisory. openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Tenable has extracted the preceding description block...
RHEL 8 : openssl (RHSA-2026:85970)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85970 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...
RHEL 8 : openssl (RHSA-2026:85968)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85968 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...
RockyLinux 8 : compat-openssl10 (RLSA-2026:80510)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:80510 advisory. openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Tenable has extracted the preceding description block...
Oracle Linux 9 : openssl (ELSA-2026-500448)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500448 advisory. 3.5.8-2.0.1fips - Replace upstream references in fips man pages Orabug: 35824276 - Update additional upstream references - Add FIPS package change: add fips...
Oracle Linux 10 : openssl (ELSA-2026-500441)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500441 advisory. - Fixes DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Resolves: RHEL-264466 - Patch asn1d2ireadbio to read headers without...
RockyLinux 9 : compat-openssl11 (RLSA-2026:80514)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:80514 advisory. openssl: heap buffer overflow in CMS key unwrapping CVE-2026-63072 openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offs...
Important: Red Hat Security Advisory: openssl security update
An update for openssl is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...
AlmaLinux 8 : compat-openssl10 (ALSA-2026:80510)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:80510 advisory. openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Tenable has extracted the preceding description block...